Starry S00111 Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Starry S00111 Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2017-13717 — CVSS 8.8 (high): Starry Station (aka Starry Router) sets the Access-Control-Allow-Origin header to "*". This allows any hosted file on any domain to make…
• CVE-2017-13718 — CVSS 8.0 (high): The HTTP API supported by Starry Station (aka Starry Router) allows brute forcing the PIN setup by the user on the device, and this allows…